turbo-pipelines
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill contains commands for installing the Goldsky CLI and Turbo extension via shell pipes (e.g.,
curl https://goldsky.com | sh). These are legitimate installation methods for the vendor's own tools and target the vendor's official domains. - [COMMAND_EXECUTION]: Instructions are provided to use the
goldskyCLI for pipeline lifecycle management, such asgoldsky turbo validateandgoldsky turbo apply. These are standard operational commands for the service. - [CREDENTIALS_UNSAFE]: The skill promotes secure practices by instructing users to use Goldsky's secrets management system (
goldsky secret create) to handle database and API credentials, rather than hardcoding them in configuration files. - [EXTERNAL_DOWNLOADS]: The skill references installation scripts and documentation from the vendor's official web presence (goldsky.com). These downloads are necessary for the skill's primary purpose and originate from a well-known service provider.
Audit Metadata